Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139392e302f32342d3234203d3e203232393237.roa
File:                     3138362e3134332e3139392e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          KVv/JhLSBI0Ku/FGGpqRN/+sIXOM14hNmP5h9oVzH7o=
Subject key identifier:   C6:D4:55:C0:59:01:73:50:A8:F2:D0:9D:B6:86:CA:3A:3A:F0:E0:0E
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       0201145D283FB1F860AEDEF5DADEC195EC70DE34
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139392e302f32342d3234203d3e203232393237.roa
Signing time:             Thu 12 Jun 2025 15:21:52 +0000
ROA not before:           Thu 12 Jun 2025 15:16:52 +0000
ROA not after:            Thu 11 Jun 2026 15:21:52 +0000
asID:                     22927
IP address blocks:        186.143.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Jun 2025 21:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:01:14:5d:28:3f:b1:f8:60:ae:de:f5:da:de:c1:95:ec:70:de:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jun 12 15:16:52 2025 GMT
            Not After : Jun 11 15:21:52 2026 GMT
        Subject: CN=C6D455C059017350A8F2D09DB686CA3A3AF0E00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:95:f0:12:7e:af:8a:94:e9:79:ff:d7:a4:
                    06:1a:01:27:ef:8b:e5:77:3a:96:ff:ec:c3:71:b8:
                    31:83:b0:72:aa:94:6a:da:ba:ea:2e:f0:d7:11:45:
                    e7:ae:3f:2d:79:bd:31:bd:c7:5a:13:58:da:c6:08:
                    70:cf:88:da:83:f0:d3:97:84:36:5b:cf:bf:d1:99:
                    55:df:d2:af:09:bb:9b:69:0f:af:22:71:6c:87:00:
                    83:a9:78:85:00:14:89:0f:1c:85:cc:74:89:e6:eb:
                    bb:56:3b:f3:87:e4:db:21:91:b5:8b:f4:48:c2:25:
                    0f:c9:28:01:d1:5c:8a:37:5b:89:20:6e:8b:03:c6:
                    52:c9:26:4b:5b:35:b8:f1:39:a7:00:a0:43:e4:c8:
                    1f:8e:16:e1:74:7e:7a:ef:e6:d7:17:69:ef:af:75:
                    7e:bd:d1:55:0d:5d:e0:c1:fb:29:c1:e8:00:0e:93:
                    56:84:9b:59:16:08:6a:8c:9a:67:3b:16:e7:aa:14:
                    06:0a:e0:96:56:4e:b4:9f:4c:fb:26:8f:04:c8:52:
                    dc:89:df:04:0c:3d:cf:0d:e9:7f:67:6c:fe:53:a9:
                    76:1e:1f:15:22:5c:23:f2:02:5f:1b:ce:0b:78:7d:
                    2a:47:12:30:e1:09:c2:ed:52:bb:8a:03:cf:63:85:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D4:55:C0:59:01:73:50:A8:F2:D0:9D:B6:86:CA:3A:3A:F0:E0:0E
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3138362e3134332e3139392e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.143.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:39:94:96:54:ab:31:90:bf:a4:b2:30:0b:1c:69:bd:21:96:
         51:ce:1d:d1:f1:ab:71:df:4b:31:36:a7:32:f4:55:8b:b7:08:
         4b:95:81:a5:c7:d6:28:b6:21:3a:9b:f9:1c:da:80:b0:f2:7b:
         ea:70:02:f0:b6:86:8b:fa:79:d7:47:25:e9:a6:7e:f8:7d:34:
         3a:03:83:1f:96:ae:5f:cd:ca:91:00:8d:4f:8e:8c:46:1d:66:
         87:64:d3:d3:7c:f3:28:c6:5a:82:01:7d:5e:66:78:ec:91:2d:
         7e:5b:01:62:14:ac:d8:56:b7:9a:e2:15:63:58:61:68:18:f5:
         66:9b:ca:12:59:da:ae:c9:81:02:4d:c4:70:37:7e:36:56:96:
         25:43:7a:ff:0c:f4:92:c1:fa:68:3f:18:e5:bb:ad:e3:6f:13:
         e0:9c:fa:7c:df:b1:fc:16:57:4f:d2:63:c4:1b:2f:75:2d:8e:
         d4:c7:57:75:c9:f5:6c:71:85:c4:e0:e1:21:08:92:10:29:b7:
         cd:3f:c2:70:92:9d:ff:40:63:79:23:6a:9c:f9:39:aa:19:be:
         66:2b:15:3d:2f:1f:a9:00:a3:b7:51:5c:76:28:00:9b:b2:fa:
         19:37:ce:20:84:e0:f7:db:93:04:cc:39:41:26:f9:9d:27:8b:
         c6:3c:c7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 21:46:23 2025 by rpki-client